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ON ZEROS OF EXPONENTIAL POLYNOMIALS 
AND QUANTUM ALGORITHMS 
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Cs| , Abstract. We calculate the zeros of an exponential polynomial of some variables by a 

classical algorithm and quantum algorithms which are based on the method of van Dam 



=5 
< 



and Shparlinski, they treated the case of two variables, and compare with the complexity 
of those cases. Further we consider the ratio (classical/quantum) of the complexity. Then 
we can observe the ratio is virtually 2 when the number of the variables is sufficiently 
large. 



1. Introduction 

For a prime number p, we put q = p v , where v is a certain positive integer. Then we 
denote the finite field by W q which has q elements. Namely, ¥ q forms an additive group 
and F* := F g \{0} forms a multiplicative group, where is the zero element in ¥ q . Any 
element of « 6 F x have a periodicity, that is there exists a smallest natural number s 
such that a s — 1. We call such s the "multiplicative order" of a. It is known that the 
multiplicative order is a divisor of #F* = q — 1. See [8], [2] for the details. 
To evaluate the number of zeros of a homogeneous polynomial 



in 



oo 



m+l 



(n ,...,n m )eNo 

^ ■ is a very important problem in mathematics. Here, No := N U {0} and a m ,... jnm G ¥ q . 

The zeta-function associated with such polynomial (the congruence zeta-function) was 
introduced to treat this problem. Particularly, the zeros of the congruence zeta-function 
satisfies an analogue of the Riemann hypothesis called "Weil conjecture". Therefore to 
compute the zeros of the congruence zeta-function is very important investigation. In [4] , 
van Dam studied the zeros of the zeta-function associated with the Fermat surface by 
using quantum computing. 

In [5], van Dam and Shparlinski treated the following exponential polynomial 

(1.1) f(x,y) = axgf + a 2 g\-b 
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and calculated the zeros of (1.1) by quantum algorithms. Further they compared the 
complexity due to a classical algorithm with that due to a quantum algorithm. Then the 
"cubic" speed-up was observed. 
In this article, we treat the exponential polynomial of n variables 

(1.2) / b (a;i, ...,x n ):= a^l 1 + ■■■ + a n g x n n - b. 

We restrict n <C q £ with a small e > 0. The reason why we claim this restriction will 
be explained in Appendix, below. We calculate the solutions of fb(xi, ■ ■ ■ , x n ) = by 
using quantum algorithms which are natural generalizations of the method of van Dam 
and Shparlinski. Here, Oj, ft G F ? x (i — 1, . . . , n) and b e ¥ q . Further we also compare 
the complexity due to a classical algorithm with that due to a quantum algorithm. Then 
exponentially "(2ra — — 1)" times speed-up is observed. We notice that (2n — l)/(n — 
1) = 2 + 1/ (n — 1) is virtually 2 when n is sufficiently large. This is the boundary between 
a standard classical algorithm and our quantum algorithm. In the previous paper [9], 
Ohno, the author and Yamazaki treated the case of three variables and obtained the ratio 
5/2. 

In the next section, we introduce some notation and give the considerable lemma which 
supports whether there exist the zeros of (1.2). In Section 3, we evaluate the complexity 
due to a classical algorithm. Further in Section 4, we evaluate the complexity due to a 
quantum algorithm. 

2. The number of solution of equation 
In this section, we give an important formula with respect to the density of solutions 

of 

(2.1) f b (x u ...,x n ) = 

as Lemma 2.1, below. To state it, we introduce some notation. 

Let each Sj be the multiplicative order of ft (i — 1, . . . , n) in (2.1). We put 



and 





■= {o,i,.. 


, Si - 1} ^ Z/siZ, 


(i = l, 


..,71 


X n (r) 


:={0,1,.. 


,r-l}CX n (r 


= 1,2,... 


i s n)i 


X n (r) 


:= X 1 x • • 


• x X n _i x X n (r), 






X n 


:= X n (s n ) 


= Xi x • • • x X n _i 


x X n 




X 


■ = (xi,..., 


x n ) E X n (r). 
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Then we define 

S h( r ) '■= {(xi,...,x n ) G X n (r) | f b (xi,...,x n ) = 0}, 
Nf b (r) := #S h (r) 

for r = 1, . . . , s n . 

By using above notation, we can state the following result: 

Lemma 2.1. Let 5 be a parameter satisfying 5 = o(q). For r > 8 2 q n (Y[fZi si)~~ 2 , we 
have 

n-1 



(2.2) N fb (r) = T ^ l = l 31 + 0(8y/^), 

except for at most q/5 2 exceptional b's. Further O-constant can be taken 1. 
Choosing 8 = (logg) 1 / 2 in Lemma 2.1, we have 

Corollary 2.2. If q n (YYi=i s i) ' 2 < r < s n, then we see that Sf b (r) ^ <f) holds 
except for at most qj logg exceptional b 's. 

Remark 2.3. The exponent 1/2 of 5 = (logg) 1 / 2 is not necessary. In fact, 5 = (logg) £ 
with any e > is sufficient. 

Proof of Lemma 2.1. Let tp be a non-trivial additive character over F 9 , in fact, any 
additive character over ¥ q can be given as a map ¥ q — > C*, where := {z e C||z| = 1} 
(see [8, Theorem 5.7]). To evaluate Nf b (v), we use the following formula which plays as 
a counting function: 

1^ . . I 1 if m = 0, 

(2.3) - V>M = 



<? ^ e¥q I otherwise. 



Then we have 



(2.4) N h (r) = lE^*'-^))) 

nn—1 
7=1 S ' , 1 



o q 

^ ^ /iSF* ieX»(r) 

nn—1 
=: __|Lil + As( r). 

If the contribution from the second term on the right-hand side of the above formula can 
be estimated by o(r YYi=i s i/q), the above formula tells us the existence of the solution 
of fb(xi, ■ ■ ■ ,x n ). To consider it, we evaluate the mean value of the second term on the 
right-hand side of (2.4) with respect to b. Namely, we evaluate 

E(r) :=^|A 6 (r)| 2 . 

b& q 
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From (2.3) and some properties of the additive character over ¥ q , we obtain 



e (n( e 



6eF„ 



n— 1 



4e n e «?» 



5 



=;£ n 

MGF q x V=l 

It is known that 



n-l 



E Tp( a nV(9 X n - 9n n )) 
x n ,x' n £X„(r) 

2 

x n eX n (r) 



E ^ a m7 ) 



< ^/g for j = 1, . . . , n — 1 and any /iGF* 



(see Theorem 8.78 in [8]). Hence we have 



^(a„/i/" n ) 



q n ~ l r. 



Therefore, if we put 5 = o(g), then we can see that there exist at most q/5 2 exceptional 
6's such that 



(2.5) 



Hence we obtain 



~E E *l>(M( x U---> x n))) 



IM&*xeX n (r) 



FTTi-l 

%(r) = rll '= 1 + O^v 7 ^) 
for other 6's. Now, the proof of Lemma 2.1 is completed. 



□ 



3. Calculation of the deterministic time for a classical algorithm 
We follow the method of van Dam and Shparlinski [5] . Then we have 

Theorem 3.1. Except for at mostqj log q exceptional b's, we can either find a solution 
x G X n of the equation (2.1) or decide that it does not have a solution in deterministic 
time 5 n ( n+1 )/ 2 ( 2n - 1 )(i ggi) ( 1 ) as a classical computer. 
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Proof. Using a standard deterministic factorization algorithm, we factorize q — 1 and 
find the orders Sj of gj (j — 1, . . . , n) in time g 1//2 (logg)°^\ We may assume without loss 
of generality that s 1 > • • ■ > s n . For calculated orders s 1 , . . . , s n _i, we put 

n-1 _ 2 

(3.1) r = [g"(n s ^ l0gq ■ 

i=i 

Then we see that the solution of (2.1) certainly exists when r < s n . However, when 
r > s n , we do not know whether such solutions exist. Therefore we have to consider those 
two cases. 

For each (x 2 , • • • ,x n -i,x n ) G X 2 x • • • x X„_i x X n (r), we calculate the deterministic 

time of the discrete logarithm x\ such that g* 1 = af 1 (6 — a 2 fi , 2 2 °nfl'^ n )- It is known 

that the deterministic time for this case is sJ^Qog q)°^ (see Section 5.3 in [3]). 

(i) The case r < s n . We have 

n—l 

^ /2 (ri s r(iogg)O(1)<<gn/2(iog9)O(1) ' 

1=2 

since s\ /2 (Ui:2Si)r<((U:=iSi) 2 r)^. 

(ii) The case r > s n . Similarly, we see that the deterministic time is 

n 

^ /2 (ri s (iogg)O(1)<<gn/2(iogg)O(1) ' 

1=2 

since s ; /2 nr= 2 ^ < ((nr=i^) 2 s«) 1/2 < m:^^) 112 - 

□ 

4. Calculation of the complexity for a quantum algorithm 

In this section, we describe quantum algorithms which are based on the method of [5] . 
Hereafter e is any positive and small real number. 

Theorem 4.1. Except for at most g/logg exceptional b's, we can either find a so- 
lution x G X n of the equation (2.1) or decide that it does not have a solution in time 
? n(n-i)/2(2n-i)+ £ ^ g ? -jO(i) as Q q Uan f um computer. 

Proof. Using Shor's algorithm [10], we can obtain the multiplicative orders s^'s (j = 
1, . . . , n) in polynomial time. We may assume without loss of generality that s 1 > • • • > s n . 
As in the proof of Theorem 3.1, we put r as (3.1). Further, we consider a polynomial time 
quantum subroutine S(x 2 , ■ ■ ■ ,x n ) which either finds and returns x x G X 1 with 

gl 1 = a^(b-a 2 g2 2 a n g x n n ) 

or reports that no such X\ exists for a given (x 2 , . . . , x„_i, x n ) G X 2 x • • • x X n _ x x X n {r) 
by using Shor's discrete logarithm algorithm. 
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(i) The case r < s n . Using Grover's search algorithm [6], we search the subroutine 
S(x 2 , ...,!„) for all (x 2 , • • • , x„_i, x„) G X 2 x • • • x X n _ x x X n (r) in time 



n— 1 



^II s *) 1/2 ( lo ^) 0(1) « g n(n - 1)/2(2n - 1)+£ (logg)°«, 

since rn^ai < ((nTi 1 *i)V) ( ^ 1)/(aB - 1) - 
(ii) The case r > s n . Similarly, we search the S(x 2 , . . . , x n ) for all (x 2 , . . . , #„) G 
X 2 x • • • x X n _i x X n (r) in time 



g £ (n s ') i/2 ( io g<7) o(i) « ^( n - i )/ 2 ^- i ) +£ (io g? ) o,ji 

£=2 

since rnu^n < ((nr^ 1 ^) 2 ^)^- 1 ^- 1 ) < ((nir^) 2 ^ 1 ^- 1 ). 

□ 



In [5], van Dam and Shparlinski mentioned when the multiplicative orders are large, 
there is a more efficient quantum algorithm. Similarly, we can also consider a more 
efficient quantum algorithm. 

Theorem 4.2. // we assume 

n-l 



1=1 



then we can either find a solution x G X n of the equation (2.1) or decide that it does not 
have a solution in time q l ^ 2+£ {iX\^=i Si) 2 s n )~ l ^ 2 ^ 2n ~ l \\ogq) 0< ^ as a quantum computer, 
except for at most qj logg exceptional b 's. 

Remark 4.3. The upper bound of the running time of the algorithm of Theorem 4.2 

is 

( ? (n-l)/2(2n-l) +£(log?) 0(l) ) _ 

Proof of Theorem 4.2. We may assume without loss of generality that s\ > s 2 > 
S3. We put 

n-l _ 2 

(4.1) r = [g n (n s 0~ hgq 

1=1 

Then from the assumption of the theorem we see that r < s n . Hence there are some 
solutions of (2.1) in X n (r) and we denote the number of the solutions of (2.1) by M. 
Note that M x (r s i)/l- 

As in the case of [5], we use the version of Grover's algorithm as described in [1] that 
finds one out of m matching items in a set of size t by using only O(^Jtfm) queries. We 
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search the subroutine S(x 2 , ■ ■ ■ , x n ) for all (x 2 , ■ ■ ■ , x n -i-> x n) G X 2 x • • • x X n _ x x X n (r). 
Then the complexity is 

,-(fflS£i>r) 1/2 (iog, r > < 9 v 2+ «((n sl ) 2 Sn )- i/2(2 "- i, ( ,o g9 )°«. 

Z=l 

□ 

5. Concluding remarks 



See the following list. 



# of variables 


Classical 


Quantum 


ratio (C/Q) 


2 (van Dam and Shparlinski) 


1 


1/3 


3 


3 (Ohno, S, Yamazaki) 


3/2 


3/5 


5/2 










n 


n/2 


n(n- l)/2(2ra- 1) 


(2ra- l)/(n- 1) 



We notice that the ratio is virtually 2 when n is sufficiently large. It seems to come from 
the effect of Grover's algorithm. 
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Appendix A. Appendix 
For a natural number n, we define the divisor function by 



In Section 1, we introduced the notion of the multiplicative order s of g e F* and 
mentioned the multiplicative order is a divisor of q — 1. 

We put gi and g 2 have the same multiplicative order. Then there exists a natural 
number I such that gi — g\. Hence, we have 



where each hi (i = 1, . . . , //) does not have the same multiplicative order and \i < d(q — 1). 
It is known that 



for any positive number e (for instance, see [7]). Hence, we have 



for any e > 0. 
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d\n 




d(n) < n e 



